Secure Boot Violation. Invalid signature detected. Using TUF Gaming A15 laptop. Windows 11

Question

Secure Boot Violation. Invalid signature detected. Using TUF Gaming A15 laptop. Windows 11

Hi 20

When i enable secure boot it gives me red screen error "Secure Boot Violation. Invalid signature detected. Check Secure Boot Policy in Setup", when i try to boot pc. It started 3-4 days ago. Windows and all the asus bios/drivers are updated. All secure boot keys worked before, tried to delete all and reinstall factory keys, didn't help. I need secure boot to work please help.

TUF Gaming A15 laptop

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Ivan B 126.9K Independent Advisor

Hi ,

Search for msinfo32.exe in the search bar, take a screenshot, and post it here so we can see the correct laptop model or desktop configuration.

Access the BIOS, take a screenshot of the "Secure Boot" tab, and post it here.

Thanks.

Hi 20 Reputation points

2026-10-31T04:58:25.0666667+00:00

Here
Ivan B 126.9K Reputation points Independent Advisor

2026-10-31T05:07:44.09+00:00

Hi,

Have you updated the BIOS to the latest version, 318?

If so, go to the "Platform Key" (PK) section and see if there is an option to select the keys.

Thanks
Hi 20 Reputation points

2026-10-31T05:36:05.93+00:00

BIOS is updated to 318, Clicking on the Platform Key gives me these actions (photo 1 from below), if i clicking update (photo 2) and say Yes it puts same key as i had, if i say No it puts me into file select menu (photo 3) which i don't understand
Ivan B 126.9K Reputation points Independent Advisor

2026-10-31T05:42:54.9833333+00:00

Hi,

You will need to upload the keys manually. Also, once you enable Secure Boot, you won't be able to access Windows; therefore, you will need a USB flash drive so we can load the keys and add them to the BIOS.

Do you have a USB flash drive?

Thank you
Hi 20 Reputation points

2026-10-31T05:49:00.27+00:00

Yes, I found flash drive
Ivan B 126.9K Reputation points Independent Advisor

2026-10-31T05:56:09.3566667+00:00

Hii,

Create a Windows installation drive; you will need it.

https://www.microsoft.com/en-us/software-download/windows11

Download it from the link above and use the Media Creation Tool to create the installation drive.

Connect the USB flash drive > run the Media Creation Tool > select "Create installation media" > choose the USB flash drive option > select the drive letter for the USB flash drive.

Wait for the process to finish

Download the SecureBootRecovery.efi file from the link below and place it in the EFI\Boot\ folder on your USB flash drive, replacing the existing bootx64.efi file.

https://drive.google.com/file/d/1XU8w6Rn_EsZl5B3DPz6kf9DZST6M7jqI/view?usp=sharing

After replacing the file, access the BIOS, set the system to boot from the USB flash drive, and ensure Secure Boot is disabled.

Wait about 10 minutes; the screen will remain black during this time.

Restart the PC, access the BIOS, remove the USB flash drive, and enable Secure Boot. Save the BIOS settings, restart the BIOS, check if "Windows Boot Manager" appears, and try to boot into Windows.

Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

Let me know if it worked; remember that "Windows Boot Manager" must appear in the boot order, and CSM must be disabled.

Thanks
Hi 20 Reputation points

2026-10-31T07:21:22.2166667+00:00

It helped, secure boot is working now, thank you so much for your help <3

Also noting if it'll be important. As far as i know ASUS BIOS doesn't have CSM changable setting. And i didn't need to wait 10 minutes through black screen, everything worked instantly